Cookie Policy

Authentication and session cookies

When you create an account or sign in, Better Auth sets a session cookie so the server can recognize the account on later requests. Production session cookies are HTTP-only, Secure, and SameSite=Lax. JavaScript in the page cannot read an HTTP-only session cookie. Session cookies normally last up to seven days unless you sign out or revoke the session earlier.

These cookies are necessary for dashboard access, account security, conversion history, API-key management, billing, and team workspaces. Blocking them prevents signed-in features from working.

Display preference

The theme selector stores convyx-theme as light or dark in local storage and in a first-party cookie with a one-year lifetime, Path=/, and SameSite=Lax. The cookie is readable by the page so the server can render the same theme on the first HTML response and avoid a hydration mismatch. It does not identify an account. If neither value is set, the page follows the browser's color-scheme preference without storing anything.

Local browser storage

Besides the theme value above, the dashboard can store the selected batch preset locally. These values stay in the browser and do not identify an account by themselves.

Billing and external destinations

When paid billing is configured and you choose checkout or the customer portal, you leave Convyx for Polar. Polar may set cookies under its own domain according to its policies. Convyx does not receive payment-card details.

Your controls

You can delete or block cookies and local storage in browser settings. Clearing the theme cookie and local value resets the display preference to the browser color-scheme; clearing or blocking the session cookie signs you out. Because Convyx currently uses only essential first-party cookies, there is no advertising-cookie preference panel.